turbot/steampipe-mod-terraform-gcp-compliance

Control: Ensure Automatic node upgrades is enabled on Kubernetes Engine Clusters nodes

Description

This control checks that Engine Clusters nodes have automatic node upgrades enabled.

Usage

Run the control in your terminal:

powerpipe control run terraform_gcp_compliance.control.kubernetes_cluster_auto_upgrade_enabled

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run terraform_gcp_compliance.control.kubernetes_cluster_auto_upgrade_enabled --share

SQL

This control uses a named query:

select
address as resource,
case
when (attributes_std -> 'management' ->> 'auto_upgrade')::boolean then 'ok' else 'alarm'
end as status,
split_part(address, '.', 2) || case
when (attributes_std -> 'management') is null then ' ''management'' is not defined'
when (attributes_std -> 'management' ->> 'auto_upgrade') is null then ' ''management.auto_upgrade'' is not defined'
when (attributes_std -> 'management' ->> 'auto_upgrade')::boolean then ' node pool auto upgrade enabled'
else ' node pool auto upgrade disabled'
end || '.' reason
, path || ':' || start_line
from
terraform_resource
where
type = 'google_container_node_pool';

Tags